AU OSA BOSE Determination 2022, s 6(1)-(3) - Safe use: core and additional expectations, with examples of reasonable steps

Where this comes from

Who it applies to

What engineering work it implies

• High Privacy Defaults ConfigurationCovers part of it

  Configure all user-facing settings to high-privacy defaults for child users.

Related obligations

Where the same control satisfies more than one framework — comply once, cover many.

• EU Digital Services ActRelated
  Implement appropriate and proportionate measures to ensure a high level of privacy, safety, and security for minors on the platformArticle 28 - Online protection of minors
• Ireland Online Safety CodeRelated
  Apply the s 12 terms and, after a prior warning, suspend frequent infringers for a reasonable period, assessed case by case with regard to fundamental rights, except where the Digital Services Act already covers the consequenceOnline Safety Code, Part B s 12 (paras 12.6-12.9) - Applying the terms; suspension of frequent infringers after a prior warning; case-by-case assessment; fundamental rights; Digital Services Act limit; Part A s 5 (para 5.3 no general monitoring)
• UK Age Appropriate Design CodeOverlapping scope
  Conduct DPIAs for services likely accessed by children, accounting for age differencesStandard 2 — Data protection impact assessments (ICO Age Appropriate Design Code, statutory guidance under DPA 2018 s 123)
• UK Online Safety Act 2023Overlapping scope
  Operate proportionate systems to prevent children of any age from encountering primary priority harmful content including pornography, self-harm, suicide, and eating disorder contentSection 12(3)(a) - Safety duties protecting children: preventing children of any age from encountering primary priority content

Evidence an auditor expects

• Policy documentDocument review

  Safety policy compliance

  Documentation showing compliance with Basic Online Safety Expectations

• Technical controlTechnical audit

  Safety mechanisms

  Technical measures meeting Australian online safety requirements

Questions people ask

Does AU OSA BOSE Determination 2022, s 6(1)-(3) - Safe use: core and additional ex… apply to my service?

It applies when Service is likely to be accessed by children under 18; and at least one of: Service allows user-generated content; Service enables direct messaging between users; Users can create public profiles.

From when does this apply?

AU OSA BOSE Determination 2022, s 6(1)-(3) - Safe use: core and additional ex… applies from 23 January 2022. Its current status is: in force.

What evidence does an auditor expect?

Safety policy compliance; Safety mechanisms.